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Abstract. There are several contexts of non-monotonic reasoning where a prior- 
ity between rules is established whose purpose is preventing conflicts. 
One formalism that has been widely employed for non-monotonic reasoning is 
the sceptical one known as Defeasible Logic. In Defeasible Logic the tool used 
for conflict resolution is a preference relation between rules, that establishes the 
priority among them. 

In this paper we investigate how to modify such a preference relation in a de- 
feasible logic theory in order to change the conclusions of the theory itself. We 
argue that the approach we adopt is applicable to legal reasoning where users, in 
general, cannot change facts or rules, but can propose their preferences about the 
relative strength of the rules. 

We provide a comprehensive study of the possible combinatorial cases and we 
identify and analyse the cases where the revision process is successful. 
After this analysis, we identify three revision/update operators and study them 
against the AGM postulates for belief revision operators, to discover that only a 
part of these postulates are satisfied by the three operators. 

Keywords. Knowledge representation, non-monotonic reasoning, sceptical logics, be- 
lief revision. 

1 Introduction 

A large number of real-life cases in legal reasoning, information security, digital foren- 
sics, and even engineering or medical diagnosis, exhibit the two following circum- 
stances: (a) different persons have different preferences, and (b) decision making de- 
pends upon the order the rules are applied. When the decision mechanism is based on 
rules, and the rules are in conflict, then inconsistencies may be generated, and deci- 
sion making may require preferences to solve/avoid conflicts. It may occur that, under 
certain circumstances, using a particular set of preferences to solve a conflict does not 
result in the desired/expected outcome. Accordingly, to revise the outcome we can re- 
vise the underlying preferences. 

Non-monotonic reasoning has been advanced for common-sense reasoning and rea- 
soning with partial and conflicting information. We can distinguish two types of non- 
monotonic reasoning: credulous and sceptical. In credulous non-monotonic reasoning, 
once a conflict arises, we independently explore the two branches of the conflict, while 



in sceptical non-monotonic reasoning a conflict must be solved before proceeding with 
the reasoning. Here we concentrate on sceptical non-monotonic reasoning. 

Typically sceptical non-monotonic formalisms are equipped with techniques to ad- 
dress conflicts, where a conflict is a combination of reasoning chains leading to a con- 
tradiction. The most common device to handle conflicts is a preference or superiority 
relation over the elements used by the formalism to reason. These elements can be for- 
mulae, axioms, rules or arguments, and the preference relation states that one of such 
elements is to be preferred to another one when both can be used. 

In this research we focus on a specific rule-based non-monotonic formalism, Defea- 
sible Logic, but the motivation behind the particular technical development applies in 
general to other rule-based non-monotonic formalisms equipped with a priority about 
rules. Indeed, considering a rule based formalism, knowledge is partitioned in facts 
(describing immutable propositions/statements about a case), rules (describing rela- 
tionships between a set of premises and a conclusion), and a preference relation or 
superiority relation (describing the relative strength of rules). A revision operatiorT] 




transforms a theory by changing some of its elements, be it the facts, rules, or supe- 
riority relation. Revision based on change of facts corresponds to an update operation 
IH, revision based on modification of rules has been investigated in |2|, whilst to the 
best of our knowledge, revision of non-monotonic theories based on modifications of 
the underlying superiority relation has been neglected so far. 

In this paper we study revision of defeasible theories operating on the superiority 
relation. We begin by arguing that, while little attention has been dedicated to this topic, 
it has natural correspondences to reasoning patterns in legal reasoning. After that, we 
investigate the type of operations that are possible for this kind of revision. 

Once we introduced the operation, it is only natural to follow by establishing which 
properties they enjoy. The properties that are significant for revision operations in belief 
revision in order to be rational have already been isolated in a systematic view proposed 
by Alchourron, Gardenfors and Makinson [3|, namely the AGM postulates. 

The AGM postulates where designed with classical logic in mind. Classical logic 
is monotonic, therefore if we add new information which is incompatible with the old 
one, an inconsistency arises. In this scenario, the sole way to recover consistency is to 
invoke a revision operator. 

Conversely, due to the nature of non-monotonic reasoning, adding new "incompat- 
ible" information in a non-monotonic system usually does not generate a contradiction 
within the theory, even if the result may not be conceptually satisfactory. 

Given the difference in nature between classical logic and non-monotonic reason- 
ing, it is of interest to investigate which AGM postulates apply to non-monotonic rea- 
soning, to what extent, and in which form they apply. 

In the recent years, a few works addressed the issue of belief revision in non- 
monotonic logics where there is a general understanding that the AGM postulates are 
not fully appropriate for non-monotonic reasoning. For example, [4| shows that belief 
revision methodologies are not suitable to changes in specific significant non-monotonic 

1 In general we will use the term revision operation to denote any operation that changes a 
theory. In SectionsplandBlthe term will be understood in a specific technical sense. 




si theories, and that it is possible to revise such theories fully satisfying the AGM postu- 

82 lates, but then the outcome is utterly meaningless for their purposes. 

83 Still, the matter whether and which postulates hold is far from being settled. For 

84 example, [5] proposed an approach to belief revision of logic programs under answer 

85 set semantics that is fully compliant with the base AGM postulates for revision. On 

86 the other hand, Delgrande [6 , p. 568] asserts that a subset of postulates for belief re- 

87 vision is not appropriate for belief revision of non-monotonic theories (and thus is ig- 

88 nored in his work), while we will argue in Section [5] that the same postulates can be 

89 adopted(Alternativa: are meaningful) in our approach. This suggests that the suitability 

90 of AGM postulates to a belief revision approach for non-monotonic reasoning is still 

91 debatable. 

92 The paper is organised as follows: In Section|2]we motivate that reasoning over pref- 

93 erences on rules and on how to modify the preferences is a natural reasoning pattern in 

94 legal reasoning. Then, in Section[3]we introduce Defeasible Logic, the formalism cho- 

95 sen for our investigation; in particular, we introduce new auxiliary proof tags to describe 

96 derivations in Defeasible Logic. The new proof tags do not modify the expressive power 

97 of the logic, but they identify patterns where instances of the superiority relation con- 

98 tribute to the derivation of a conclusion. Armed with this technical machinery, in Sec- 

99 tion[4]we start by proving that the problem of revising a theory changing the superiority 

100 relation is, in general, an NP-complete problem; secondly, we provide an exhaustive 

101 analysis of the cases and conditions under which revision operations modifying only 

102 the superiority relation are successful. Section [5] analyses the AGM postulates against 

103 the introduced operators. Section|6]overviews closely related approaches, and Section|7] 

104 concludes the paper with a summary of the achieved results, discussion of related works 

105 and quick hints for future developments. 

106 2 Norms and Preferences in Legal Reasoning 

107 It has been argued [7| that some aspects of legal reasoning can be captured by non- 
los monotonic rule-based formalisms. The main intuition is that norms can be represented 
109 by rules, the evidence in cases by facts, and that the superiority relation is induced by 
no legal principles determining how to solve conflicts between norms. 

in We take the stance that, typically in the legal reasoning domain, we do not have 

n2 control over the rules (norms) or their modification, but have some control on how they 

in can be used. An average citizen has no power to change the Law, and has no power 

n4 on what norms are effective in the jurisdiction she is situated in. These powers instead 

us are reserved to persons, entities and institutions specifically designated to do so, for 

lie example the parliament and, under some given constraints, also by judges (in Common 

a? Law juridical system, especially). 

us However, a citizen can argue that one norm instead of another applies in a specific 

no case. This amounts to saying that one norm is to be preferred to the other in the case. 

120 Prima-facie conflicts appear in legal systems for a few main reasons, among which 

121 we can easily identify three major representatives: (1) norms from different sources, 

122 (2) norms emitted at different times, and (3) exceptions. These phenomena are well 

123 understood and have given rise to principles which existed for a long time in legal theory 



124 and been used to solve such issues. These principles are still used in many situations, 

125 such as an argument to drive constitutional judgement against a given norm or a given 

126 sentence. Here we list the three major legal principles, expressing preferences among 

127 rules to be applied 0. 

128 Lex Superior This principle states that when there is a conflict between two norms 

129 from different sources, the norms originating from the legislative source higher in 

130 the legislative source hierarchy takes precedence over the other norm. This means 

131 that if there is a conflict between a federal law and a state law, the federal law 

132 prevails over the state law. 

133 Lex Posterior According to this principle, a norm emitted after another norm takes 

134 precedence over the older norm. 

135 Lex Specialis This principle states that when a norm is limited to a specific set of 

136 admissible circumstances, and under more general conditions another norm applies, 

137 the most specific norm prevails. 

us Besides the above principles a legislator can explicitly establish that one norm pre- 

139 vails over a conflicting norm. 

mo The intuition behind these principles (and eventually others) is that when there are 

mi two conflicting norms, and the two norms are applicable in a specific case, we can apply 

142 one of these principles to create an instance of a superiority relation that discriminates 

143 between the two conflicting norms. However, there are further complications. What if 

144 several principles apply and these produce opposite preferences? Do the preferences 

145 lead to opposite outcomes of a case? These are examples of situations when revision of 
we preferences is relevant. The following example illustrates this situation. 

147 Charlie is an immigrant son of an italian, and living in Italy, who is interested in 

us joining the Italian Army, based on Law 91 of 1992. However, his application is rejected, 

149 based upon a constitutional norm (Article 5 1 of the Italian Constitution). The two norms 

150 Law 91 and Article 51 are in conflict, thus the Army's decision is based on the lex 

151 superior principle. Charlie appeals against the decision in court. The facts of the case 

152 are undisputed, and so are the norms to be applied and their interpretation. Thus the 

153 only chance for Bob, Charlie's lawyer, to overturn the decision is to argue that Law 91 

154 overrides Article 5 1 of the Constitution. Thus Bob counter-argues appealing to the lex 

155 specialis principle since Law 91 of 1992 explicitly covers the case of a foreigner who 

156 applies for joining the Army for the purpose of obtaining citizenship. 

157 The two arguments do not discuss about facts and rules that hold in the case. They 

158 disagree about which rule prevails over the other, Article 5 1 of the Constitution or Law 

159 91. In particular, Bob's argument can be seen as an argument where the relative strength 

160 of the two rules is reversed compared to the argument of the Army's lawyer, and it can 

161 be used to revise the previous decision. 

162 While the mechanism sketched above concerns the notion of strategic reasoning, 

163 where a discussant looks at the best argument to be used in a case to prove a given 

164 claim, in this case, that one rule prevails over another rule. However, the key aspect 

165 is that before embarking in this kind of arguments, one has to ensure that changing a 

166 preference leads to a different outcome of the claim of the case. It is not our aim to 

167 study how to justify preferences using argumentation. In this work, we investigate if it 

168 is possible to modify the extension of a theory (as represented by a defeasible theory) 



169 only through changes on the superiority (preference) relation. Thus, we believe that 

170 our framework is foundational for argumentation of preferences. This means that one 

171 can first determine whether the outcome of a discussion can be turned in her favour 

172 only changing the superiority relation, and then to figure out which argument (if any) 

173 supports the preference. 

174 In the current literature about formalisms apt to model normative and legal reason- 

175 ing, a simple and efficient non-monotonic formalism which has been discussed in the 

176 community is Defeasible Logic. This system is described in detail in the next sections. 

177 One of the strong aspects of Defeasible Logic is its characterisation in terms of ar- 

178 gumentation semantics [9|. In other words, it is possible to relate it to general reasoning 

179 structure in non-monotonic reasoning which is based on the notion of admissible rea- 
lso soning chain. An admissible reasoning chain is an argument in favour of a thesis. For 
lsi these reasons, much research effort has been spent upon Defeasible Logic, and once 

182 formulated in a complete way it encompasses other (sceptical) formalisms proposed for 

183 legal reasoning 191101111 . 

184 Most interestingly, in Defeasible Logic we can reach positive conclusions as well as 

185 negative conclusions, thus it gives understanding to both accept a conclusion as well as 

186 reject a conclusion. This is particularly advantageous when trying to address the issues 
is? determined by reasoning conflicts. 

188 It has been pointed out that the AGM framework for belief revision is not always 

189 appropriate for legal reasoning |4|. Moreover, it is not clear how to apply AGM to pref- 

190 erence revision. Accordingly, this paper provides a comprehensive study of the condi- 

191 tions under which it is possible to revise a defeasible theory by changing the superiority 

192 relation of the theory, 

193 3 Defeasible Logic 

194 A defeasible theory consists of five different kinds of knowledge: facts, strict rules, 

195 defeasible rules, defeaters, and a superiority relation fl2l . Examples of facts and rules 

196 below are standard in the literature of the field. 

197 Facts denote simple pieces of information that are considered always to be true. For 

198 example, a fact is that "Sylvester is a cat", formally cat(Sylvester). A rule r consists 

199 of its antecedent A(r) which is a finite set of literals, an arrow, and its consequent 

200 (or head) C(r), which is a single literal. A strict rule is a rule in which whenever the 

201 premises are indisputable (e.g., facts), then so is the conclusion. For example, 

cat(X) — » mammal(X) 

202 means that "every cat is a mammal". A defeasible rule is a rule that can be defeated by 

203 contrary evidence; for example, "cats typically eat birds": 

cat(X) eatBirds(X). 

204 The underlying idea is that if we know that something is a cat, then we may conclude 

205 that it eats birds, unless there is evidence proving otherwise. Defeaters are rules that 

206 cannot be used to draw any conclusion. Their only use is to prevent some conclusions, 



207 i.e., to defeat defeasible rules by producing evidence to the contrary. An example is "if 

208 a cat has just fed itself, then it might not eat birds": 

justFed(X) -^eatBirds(X). 

209 The superiority relation among rules is used to define where one rule may override 

210 the conclusion of another one, e.g., given the defeasible rules 

r : cat(X) => eatBirds{X) 
r : domesticCat{X) ~^eatBirds{X) 

2n which would contradict one another if Sylvester is both a cat and a domestic cat, they do 

212 not in fact contradict if we state that r 1 wins against r, leading Sylvester not to eat birds. 

213 Notice that in Defeasible Logic the superiority relation determines the relative strength 

214 of two conflicting rules, i.e., rules whose heads are complementary. The complementary 

215 of a literal q is denoted by ^q; if q is a positive literal p, then ~q is ^p, and if q is a 

216 negative literal -ip then ~g is p. 

217 Like in fl2l . we consider only a prepositional version of this logic, and we do not 

218 take into account function symbols. Every expression with variables represents the finite 

219 set of its variable-free instances. 

220 A defeasible theory D is a triple (F , R, >), where F is a finite consistent set of literals 

221 called facts, Risa finite set of rules, and > is an acyclic superiority relation on R; given 

222 two rules r and s, we will use the infix notation r > s to mean that (r,s) 6>. The set of 

223 all strict rules in R is denoted by R s , and the set of strict and defeasible rules by R sc /. We 

224 name R[q] the rule set in R with head q. A conclusion of D is a tagged literal and can 

225 have one of the following forms: 

226 1 . +Aq, which means that q is definitely provable in D, i.e., there is a definite proof for 

227 q, that is a proof using facts, and strict rules only; 

228 2. — Aq, which means that q is definitely not provable in D (i.e., a definite proof for q 

229 does not exist); 

230 3. +dq, which means that q is defeasibly provable in D; 

231 4. —dq, which means that q is not defeasibly provable, or refuted in D. 

232 A proof (or derivation) is a finite sequence P — (P(l), . . . ,P(i)) of tagged literals 

233 where for each n, < n < i the following conditions (proof conditions) are satisfied and 

234 P( 1 . ./) denotes the initial part of the sequence of length i, 

+A: If P(« + l) = +Aq then 

(1) q£FoT 

(2) 3r€R s [q]Va£A(r) : +Aa G P(l..n). 

235 The negative proof conditions for A are the strong negation of the positive coun- 

236 terpart: this is closely related to the function that simplifies a formula by moving all 

237 negations to an inner most position in the resulting formula, and replaces the positive 

238 tags with the respective negative tags, and the other way around 1131141 . 



-A:lfP(n+i) = -Aq then 

(1) <7^Fand 

(2) Vr€R s [q]3a€A(r) : 



-AaeP(l..n). 



239 The proof conditions just given are meant to represent forward chaining of facts and 

240 strict rules (+A), and that it is not possible to obtain a conclusion just by using forward 

241 chaining of facts and strict rules (—A). 

242 The proof conditions for ±<9 are as follows: 

+d: IfP(n+l) = +<9^then either 

(1) +Aq eP(l..n), or 

(2) (2.1) -4~?€P(1..b) and 

(2.2) 3r e R s d[q] such that Va e A(r) : +da e P(\..n) and 

(2.3) Vs € R[~q] either 

(2.3.1) 3aeA(s) such that -da E P(\..n), or 

(2.3.2) 3t € such that 

Va e A(f) : +<9a e P(l..n) and f > 5. 

-<?: IfP(«+l) = -<9o then 

(1) +Aq <£P(l..n) and either 

(2) C2.1)+4~9GP(1.ji),qt 

(2.2) VreR sd [q] 3aeA(r) : -daeP(L.n) or 

(2.3) 3seR[~q] such that 

(2.3.1) Va eA(s) : +daeP(l..n) and 

(2.3.2) Vt eR S d[q\ either 

3a €A(t) : -da e P(l..n), or t ^ s. 

243 The main idea of the conditions for a defeasible proof (+<3) is that there is an ap- 

244 plicable rule (i.e., a rule where all the antecedents are defeasibly proved) and every rule 

245 for the opposite conclusion is either discarded (i.e., one of the antecedents is not defea- 

246 sibly provable) or defeated by a stronger applicable rule for the conclusion we want to 

247 prove. The conditions for the negative proof tags (e.g., —d) show that any systematic 

248 attempt to defeasibly prove the conclusion fails. The conditions for +A and —A, and 

249 +d and — d are related by the Principle of Strong Negation introduced in [ 13 1. The key 

250 idea behind this principle is that conclusions labelled with a negative proof tag are the 

251 outcome of a constructive proof that the corresponding positive conclusion cannot be 

252 obtained (and the other way around). The principle states that the inference conditions 

253 for a pair of proof tags +# and — # are the strong negation of the other, where the strong 

254 negation of a condition corresponds essentially to the function that simplifies a formula 

255 by moving all negations to an innermost position in the resulting formula (for the full 

256 details see |[T3l ). 

257 As usual, given a proof tag #, a literal p and a theory D, we use D h ±#p to denote 

258 that there is a proof P in D where for some line i, P{f) = ±#p. Alternatively, we say 

259 that ±#p holds in D, or simply ±#p holds when the theory is clear from the context. 

260 The set of positive and negative conclusion is called extension. Formally, 



261 Definition 1 Given a defeasible theory D, the defeasible extension ofD is defined as 



E(D) = (+d,-d), 

262 where ±d — {1:1 appears in D and D h ±<9/}. 

263 Due to the nature of the revision operators discussed in this paper, the extension 

264 does not contain strict conclusions since the only way to modify them is to operate on 

265 the set of strict rules (i.e., addition or removal). Similarly, the extension will not include 

266 information about the proof tags introduced below. Such proof tags are useful to identify 

267 structures in proofs and where to operate in the theory, but they do not specify what is 

268 defeasibly provable, or not. 

269 The inference mechanism of Defeasible Logic does not allow us to derive inconsis- 

270 tencies unless the monotonic part of the logic is inconsistent, as clarified by the follow- 

271 ing definition. 

272 Definition 2 A defeasible theory D is inconsistent iff there exists a literal p such that 

273 ((D h +dp andDV- +d~p) iff (D h +Ap andDV- +A~p)). 

274 In this paper, we do not make use of strict rules, nor defeaters^] since every revision 

275 changes only the priority among defeasible rules (the only rules that act in our frame- 

276 work), but we need to introduce eight new types of auxiliary tagged literals, whose 

277 meaning is clarified in Example [T] As it will be clear in the remainder, they will be 

278 significantly useful in simplifying the categorisation process, and consequently, the re- 

279 vision calculus. 

280 Example 1. Let D be the following defeasible theory: 
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281 To improve readability, from now on we use the following graphical notation to repre- 

282 sent a theory like the previous one: 

2 The restriction does not result in any loss of generality: (1) the superiority relation does not 
play any role in proving definite conclusions, and (2) for defeasible conclusions 1 12 1 proves 
that it is always possible to remove (a) strict rules from the superiority relation and (b) defeaters 
from the theory to obtain an equivalent theory without defeaters and where the strict rules are 
not involved in the superiority relation. A consequence of this assumption is that the theories 
we work with in this paper are consistent. 



=> n a => M c => rj d 
V " A 

^ n b => rg -nc 



=>r 10 e =>r u f 

283 where the A and V symbols in the graphical representation of a theory are not conjunc- 

284 tions and disjunctions but they represent the superiority relation >. In the example, V 

285 means that r\ > r\ and A that r$ > rj,. 

286 A conclusion in a defeasible proof can now take one or more of the following forms: 

287 5. +Eq, which means there is a reasoning chain supporting q; 

288 - r\, r%, r3 form a chain supporting literal d (+Ed). 

289 6. — Eq, which means there is no reasoning chain supporting q; 

290 - Since there are no rules for literal -<p, then we have —E-ip. 

291 7. +(Jq, which means there exists a reasoning chain supporting q that is not defeated 

292 by any applicable reasoning chain attacking it; 

293 - r\, r2 and rj, rg are two undefeated chains for c and -c, respectively; Thus, we 

294 have +(7c, +C^c. 

295 8. — Oq, which means that every reasoning chain supporting q is attacked by an appli- 

296 cable reasoning chain; 

297 - Every chain for d is defeated (—ad, notice that there exists only one in this 

298 case). 

299 9. +(Oq, which means there exists a reasoning chain supporting q that defeasibly proves 

300 all its antecedents; 

301 - In the chain r\, r-i, r-$, only rule is defeated, hence +cod holds. 

302 10. — (Oq, which means that in every reasoning chain supporting q, at least one of its 

303 antecedents is not defeasibly provable. 

304 - Since +db does not hold, we can conclude — co^c. 

305 11. +(pq, which means there exists a reasoning chain that defeasibly proves q made of 

306 elements such that there does not exist any rule for the opposite conclusion; 

307 - There are no rules for -<e, thus +<pe holds. 

308 1 2. —cpq, which means that for every reasoning chain supporting q there exists an ele- 

309 ment such that a rule for the opposite conclusion could fire; 

310 - r4 supports hence we have — (pa. 

3n The tagged literals are formally defined by the following proof conditions. Again, 

312 the negative counterparts are obtained by the principle of strong negation. An important 

313 consequence of using this principle to formulate the conditions for asserting tagged 

314 literals is that for any literal p and any proof tag #, it is not possible to have both +#p 

315 and — #p (the interested reader is referred to B13I141 ). 

316 Such proof tags identify structures of rules and demonstrations that are significant 

317 for the revision operations when we change the superiority relation. For example, +Ep 

318 means that we could use Modus Ponens (or forward chaining) for deriving +dp. 



+E : If P(n + 1 ) = +Zq then 

(1) +Aq€P(l..n) or 

(2) 3r G R s d[q] such that Va G A(r) : +Za € P(l..n) 

-Z: IfP(n + l) = then 

(1) +A^P(l..n) and 

(2) Vr G R sd [q] : 3aeA(r) such that -La G P(l..n) 

319 The definitions of ±£ formalise the concept of chain leading to a given literal. 

320 With respect of the analysis on how to change a theory by only acting on the supe- 

321 riority relation, if there does not exist any chain leading to a literal p (i.e., — Ep holds), 

322 then no modification of the theory is possible to prove p. 

+a: If P(n + 1) = +aq then 

(1) +Aq€P(l..n) or 

(2) 3r G R s d[q] such that 

(2.1) Va G A(r) : +aa G P(l..n) and 

(2.2) Vs G fl[~<?]3a G A(si) such that 
-<9a G P(l..n) or s ^ r. 

-ct: If P(n + 1) = -cr^ then 

(1) +AqgP(\..n) and 

(2) VrGP srf fe]: 

(2.1) 3a GA(r) such that - aa G P(l..n) or 

(2.2) 3i G P[~?] such that 

Va eA(s) : +da G P(l..«) and 5 > r. 

323 Notice that the definitions given above for ±c are weak forms of the notion of support 

324 proposed in II 151 131 for the definition of an ambiguity propagating variant of Defeasible 

325 Logic, in the sense that these definitions are less selective than the ones of |[T5l . 

326 The undefeated chain that allows to state +<jp may be a good candidate for the 

327 revision process in order to defeasibly prove p. 

+(0: If P(n + 1) = +G)q then 

(1) +AqeP(l..n) or 

(2) 3r £ R sd [q] such that Va G A(r) : +da G P(l..n). 

-G>: If P(n+ 1) = -COq then 

(1) +Aq <£P{\..n) and 

(2) Vr G R s d[q] ■ 3a G A(r) such that -da G P(l..n). 

328 The chain that allows to state +cop represents a defeasible proof for p that can only 

329 fail on the last derivation step. Thus, possible modifications can focus on this last step 

330 instead of considering the whole chain. 

+<p: If P(ra+1) = +(pq then 

(1) +AoGP(l..re) or 

(2) 3r £ R sc / [q] such that 

(2.1) Va G A(r) : +<pa£P{\..n) and 

(2.2) Vs G R[~q] : 3a G A(s) such that -£a GP(l-.n). 



— <p: If P(n + 1) = -cpq then 

(1) +Aq £P(l..n )and 

(2) Vr 

(2.1) 3a e A(r) such that -<pa € P(l..n) or 

(2.2) 3* such thatVa eA(s) : +ZaeP(l..n). 

The definition of +cp ensures that it is not possible to have a counter-argument for a 
reasoning chain, i.e., a proof, for a literal tagged with it. In particular, we can not have 
a direct attack, nor an attack to one of its arguments. Therefore, no modification on the 
superiority relation is possible to reject a literal tagged with +cp. 

Given the above definitions, it is straightforward to derive the implication chains 
reported below in Figure 1(a) - (b) using techniques presented in |fl6l . 



+ C0 -co 
+A -> +<p +d +E -I -d -<p 

+ CT — <T 

(a) Positive implication chain (b) Negative implication chain 

Fig. 1: Implication chains. 



337 One could be tempted to say that +a implies +co (and symmetrically, — CO implies 

338 — a). This is not the case. Indeed, if we consider theory D of Example[T] we have: (i.) 

339 +cod and — ad, (ii.) +c^c and — co^c. 

340 To better explain how the new proof tags behave, we report in Table [T] the set of 

341 all conclusions. For each literal, we only report the proof tag which is minimal with 

342 respect to the orderings given in Figure [TJ For example, +da means that we prove 

343 +C0a, +aa, +Ea, but — (pa. If no tag is reported, then it is not possible to derive the 

344 literal with any tags with respect to the ordering given in Figure [T] 





a b c 


d 


e 


f 


P 


+ 


+d +0- +d 

— <p —d —d 


+ CO 

—a 


+<P 


+<P 


+d 
-<P 




-ia ->b -ic 


-^d 


-ie 


-/ 




+ 


+co +a +a 

—d —d -co 


+d 
-<P 


-L 


-X 


-z 



Table 1: Conclusions for literals in Example 1 



345 We report now some theoretical results: these are useful during the revision process 

346 described in Section[4] Proposition[3]highlights the fact that, given a theory D and literal 

347 q, if D h +(pq then there are no chains for the complementary. Notice that, in general, 

348 the opposite does not hold (as for literal p in Example flj. 

349 Proposition 3 Given a consistent defeasible theory D, ifD h +q>pfor a literal p (with 

350 p (jL F), then Dh —E^~>p. 

351 Proof. The proof straightly follows from the definition of +<p, condition (2.2). This 

352 condition must hold for each element in the chain, as well as for p. 

353 The next proposition formally states the following idea: given a defeasibly proved 

354 literal p and a chain leading to ~p with all the antecedents defeasibly proved, then such 

355 a chain is defeated by a priority rule at the last proof step (by the rule proving p). 

356 Proposition 4 Given a consistent defeasible theory D, ifD h +dp and D h +(D^pfor 

357 a literal p ( with p £ F), then Dh- <7~ p. 

358 Proof. By definition of +d, we have that the condition below 

(2.3) Vi G R[~p] either 

(2.3.1) 3a£A(s) : -da£P(\..n) or 

(2.3.2) 3t £ R sd (p] such that 

Va € A(t) : +da £ P(\..n) and t > s 

359 holds for p. In fact condition (2.3.2) has to be true since we know condition (2.3.1) is 

360 not, because 

DY- +dp implies 3r £ R [p] .Va £ A (r) : +da 1 
D h +oa~p implies 3s £ R[~p].Va £ A(s) : +daj 

361 

3t £ R\p].Wa £ A(t) : +da and t > s. 

362 This is condition (2.2) for ~a^p. Moreover, since all the premises of ~p are defeasibly 

363 proved by hypothesis and we have proved that the chain is defeated, then it has to loose 

364 on the last proof step. 

365 We now capture the concept of a derivation based on a contradiction. To do so, we 

366 begin by defining what the meaning of dependency between literals is; afterwards, we 

367 look at how the notion of d-unreachability defines literals whose derivation is based 

368 upon an inconsistency. 

369 Definition 5 Let a and b be two literals. Then a depends on b iff (1) b = a or (2) 

370 W £ R[a], either (2.1) b £ A(r), or (2.2) 3c such that c £ A(r), and c depends on b. 

371 The following result shows that a defeasibly proved literal also implies the provability 

372 of all literals it depends on. In other words, the property of dependency given above 

373 propagates backwards the defeasible provability of literals. 



374 Proposition 6 Given a defeasible theory D, if D h +d p and p depends on q, then 

375 D h +dq. 

376 Proof. The proof is by case inspection of Definition [5] If clause (1) holds, the claim 

377 trivially follows. For the other cases, the proof is by induction on the degree of depen- 

378 dency between literals. A literal a depends on b with degree 1 if a depends on b and 

379 there exists a rule r, with C(r) = a and b € A(r). A literal a depends on b with degree 

380 n + 1 if a depends on b and there is a literal c such that a depends on c with degree 1 

381 and c depends on b with degree n. 

382 For the inductive base (i.e., p depends on q with degree 1), +dp means that there is 

383 a rule for p with every antecedent defeasibly proved. Thus, D h +dq. 

384 For the inductive step, suppose that the property holds up to degree n and p depends 

385 on q with degree n + 1. By definition, there exists a literal c such that p depends on c 

386 with degree 1, thus D h +<9c (given D h +<?p by hypothesis) and c depends on g with 

387 degree n. Thus, by inductive hypothesis, D h +<9g. 

388 The next definition identifies literals only depending on contradictions. For exam- 

389 pie, consider the theory with the following rule: 

a, ->a,b p. 

390 For deriving +dp we need both +da and +d^a, and this is possible only in the case 

391 that the theory is inconsistent. However, we have also to cater for situations where the 

392 dependency is not direct, for example in theories like 

a => r , b ->a,b => r2 p. 

393 

394 Definition 7 A literal p is <9 -unreachable iff Vr £ R[p], either (1) 3l,3a,b € A(r) such 

395 that (1.1) a depends on I, and (1.2) b depends on ~/, or (2) 3d € A{r) such that d is 

396 d -unreachable. Otherwise, we define p to be d -reachable. 

397 The result below formalises the relationship between d -unreachable literals and incon- 

398 sistent theories. 

399 Proposition 8 Given a theory D, let p be a d -unreachable literal. If D h +dp, then D 

400 is inconsistent. 

401 Proof. The proof is by induction on the number of d -unreachable literals in a derivation. 

402 For the base case, p is the only <9-unreachable literal in its derivation. Given that 

403 D h +d p, there is a rule for p such that all its antecedents are provable. By Definition[7j 

404 for every rule for p there are two antecedents a and b depending on a literal I and its 

405 complement, respectively. Thus, we have both +da and +db. By Proposition [6] we 

406 have D h +dl and D h +d~l, then D is inconsistent. 

407 For the inductive step, we assume that the property holds up to n d -unreachable lit- 

408 erals, and p is the (re+ l) th ^-unreachable literal. Beside the case we examined in the in- 

409 ductive base, we have to consider that the antecedent of a rule contains a d -unreachable 

410 literal d and D h +dd. Thus, d falls under the inductive hypothesis, therefore D is 

411 inconsistent. 



412 The following proposition states that if there is a <9-reachable literal p with at least 

413 one supporting chain, then it is always possible to defeasibly prove p. In other words, 

414 the problem of modifying the superiority relation to pass from —dp to +dp (or from 

415 +d^p to +dp) has always a solution, provided that there exists a non-contradictory 

416 support. 

417 Proposition 9 Given a consistent defeasible theory D = (F,R,>) and a d-reachable 

418 literal p with D h +Ep, there exists a theory D' = {F,R 1 >') such that D' h +dp. 

419 Proof. Proposition [8] shows that a d -unreachable literal is provable only when the the- 

420 ory is inconsistent, which is against the hypothesis of the proposition. 

421 Suppose that D h +E p for a theory D. Then, there is at least one reasoning chain C 

422 supporting p. Among all the possible superiority relations based on F and R, there is a 

423 superiority relation >' where every rule r : A c in C is superior to any rule for ~c. 

424 Thus, theory D' = (F,R, >') is such that D' h +dp. 

425 To illustrate why both conditions of Proposition|9]are required to guarantee that the 

426 canonical case whose outcome is +dp after the revision operation, let us consider a 

427 theory with the following rules: 

=> ri a 
=> r2 ~^a 

a, ~^a =5> r3 p. 

428 In this case we have both +Ea and +E^a, therefore we can build a reasoning chain to 

429 p, but p itself is <9-unreachable because it depends on a contradiction. Thus, there is no 

430 way to change the previous theory to prove p. 

431 We end this section proposing an example to translate a real-life case into our logic. This 

432 will also help in giving an intuitive revision mechanism that shows how argumentation 

433 in legal reasoning is easily mapped in changing the superiority relation of a defeasible 

434 theory. 

435 Example 2. A couple can have offspring but, since both mother and father are affected 

436 of cystic fibrosis, they know that every their child will be most likely affected by the 

437 same genetic anomaly. Since they want their offspring to be healthy, they request for 

438 medically assisted reproduction techniques. Their case is disputed first in an Italian 

439 Court where the judge has to establish which between Art. 4 of Italian Legislative Act 

440 40/200-£] (ro and r\) and the standard common medical practice (V3) in force in 15 

441 countries of the EU prevails. 

442 The couple is indeed able to produce embryos and they cannot be considered as 

443 sterile (V2). This makes both Art. 4 and the standard common medical practice to be 

444 applicable to their case. The judge argues in favour of r\ based on lex superior and 

445 refuses their request: this principle applies since Art. 4 Act 40/2004 is a legal rule while 

446 r3 has a juridical validity but it is not a proper legal rule. 



3 Art. 4 of Italian Legislative Act 40/2004: "The recourse to medically assisted reproduction 
techniques is allowed only [. . . ] in the cases of sterility" . 



F = {Embryo, GeneticAnomalies} 

R = {ro : -^CandidatelnVitroFertilization =>■ -^Techniques, 
r\ : -^Sterility =>■ -^CandidatelnVitroFertilization, 
r2 : Embryo =4- ^Sterility, 

rj, : -^Sterility, GeneticAnomalies => CandidatelnVitroFertilization, 
r4 : ^Sterility, GeneticAnomalies => —^Healthy 
r$ : GeneticAnomalies, CandidatelnVitroFertilization Healthy} 
>={(rur 3 )}. 

447 The couple appeals to the European Court for Human Rights. The Court establishes that 

448 not permitting the medical techniques would demote the goal of family health promoted 

449 by Article 8 of the Convention. In our example, r 3 promotes the goal of family health 

450 (r$), and thus we invert the priority between r\ and r 3 based both on lex superior and 

451 lex specialis (>'= {(/3,n)}). In here, the lex superior principle applies because rj is 

452 an european directive, while the lex specialis principle applies because rj covers a more 

453 specific case than r$. 



4 Changing defeasible preferences 

We now analyse the processes of revision in a defeasible theory, when no changes to 
rules and facts are allowed. Henceforth, when no confusion arises, every time we speak 
about a (revision) transformation we refer to a (revision) transformation acting only on 
the superiority relation. 

A good starting point for our investigation is to focus on the corresponding decision 
problem (i.e., answering the question it is possible to modify the state of a literal 
in a defeasible theory by changing the relative strength of rules) and characterise it 
in a formal way (so as to be able also to answer the question when). In particular, 



463 in Subsection 4. 1 we show that the decision problem at hand is computationally hard 

464 in general, while in the remaining of the section we partition the decision problem in 

465 three sub-cases which correspond to the possible ways in which we can modify the 

466 (provability) state of a literal. 



467 4.1 NP-Completeness 



468 First, we introduce some additional terminology. Definition 10 constructs a defeasible 

469 theory starting from a fixed set of rules and an empty set of facts. This formulation limits 

470 the revision problem to preference changes, notwithstanding the particular instance of 

471 the superiority relation. 

472 Definition 10 Given a set of defeasible rules R, a defeasible theory D is based on R iff 



D=(M.>)- 



473 The aim of Definition [TT] is to specify the possible relationships between a literal 

474 and all theories based on a set of rules R. 

475 Definition 11 Given a set of defeasible rules R, a literal p is 

476 1. >-/?-tautological iff for all theories D based on R, Dh +dp. 

477 2. >-/?-non-tautological iff there exists a theory D based on R such that D \f -\-dp. 

478 3. >-/?-refutable iff there exists a theory D based on R such that D h —dp. 

479 4. >-/?-irrefutable iff for all theories D based on R, Dif —dp. 

480 The notion of >-R-irrefutable represents the negative counterpart of >-R-tautological; 

481 the same holds for >-R-refutable and >-R-non-tautological. 

482 If p is >-R-tautological, then, in every theory based on the set of rules R, an instance 

483 of the superiority relation such that p is defeasibly refuted does not exist. Accordingly, 

484 if a literal is >-R-tautological, then we cannot revise it. 

485 On the contrary, if an instance of the superiority relation where p is no longer prov- 

486 able exists, then p is >-R- refutable. 

487 To prove the NP-completeness of the problem of establishing if it is possible to revise a 

488 theory modifying only the superiority relation, we reduce the 3-SAT problem - a known 

489 NP-complete problem - to our decision problem. In particular, we are going to map a 

490 3-SAT formula to a defeasible theory and we check wether the literal corresponding to 



49i the 3-SAT formula is tautological. Definition 12 exhibits the reduction adopted 



n 3 

Definition 12 Given a 3-SAT formula r — /\ C, such that Cj = V fl! ;> we define the T- 
transformation as the operation that maps T into the following set of defeasible rules 

Rr = {r« j :^a) 
nj : a'j => Cj 
r^i :=> ~c; 
n : ~Cj =>p}. 



The above definition clearly shows that the mapping is polynomial in the number of 
literals appearing in the 3-SAT formula F. 

The second step of the proof construction is to ensure that the proposed mapping 
always allows the revision problem to give a correct answer (either positive, or nega- 



tive) for every 3-SAT formula. Proposition 14 and Lemma 15 guarantee that any theory 



obtained by F-transformation provides an answer. These results are also intended to 
establish relationships between the notions of tautological and refutable given in Defi- 
nition [TT] 

Definition 13 A defeasible theory D is decisive iff for every literal p in D either D h 
+dp, or Dh —dp. 



502 Proposition 14 Given a defeasible theory D, if the atom dependency graph of D is 

503 acyclic, then D is decisive. 



504 Proof. For a detailed definition of atom dependency graph and a complete proof of the 

505 claim, the interested reader should refer to ifTTIl . 



506 Lemma 15 Any defeasible theory D based on Rp of Definition 12 (for any F) is deci- 

507 sive. 

508 Proof. It is easy to verify by case inspection that the atom dependency graph is acyclic. 

509 We are now ready to introduce the main result of NP-completeness. First of all, we 

510 have to prove that the revision problem is in NP. Second, we show that it is NP-hard 
5n by exploiting the formulation of the 3-SAT problem and the transformation proposed in 

512 Definition[T2l 

513 Theorem 16 The problem of determining the revision of a defeasible literal by chang- 

514 ing the preference relation is NP-complete. 

sis Proof. The proof that the problem is in NP is straightforward. Given a defeasible theory 

516 D — (F,R,>) and a literal p to be revised, an oracle guesses a revision (in terms of a 

517 new preference relation >' applied to D) and checks if the state of p has changed based 
sis on the extensions of D and D 1 = (F,R, >'). The complexity of this check is bound to the 

519 computation of the extensions of D and D', which ifTSIl proves to be linear in the order 

520 of the theory. 

« 3 

521 To prove the NP-hardness, given a 3-SAT formula F = /\ C, such that C,- = V a /> a 

• i i i 

522 defeasible theory D based on the set of defeasible rules Rp obtained by F -transformation, 

523 and a literal p in D, we show that: 

524 (1) if p is >-,Rr-tautological, then F is not satisfiable; 

525 (2) if p is >-/?r-non-tautological, then F is satisfiable. 

526 (1) Lemma \15\ allows us to reformulate the contrapositive using >-Rr -refutable. If F is 

527 satisfiable, then there exists an interpretation / such that 

n 

I N F / N f\ Q 

i=l 

I\=C\ and . . . and / 1= C„ 

3 3 

/ N \/ a) and . . . and/ N \J a'). 

528 Thus, for each i, there exists /' such that / N a'-. 

529 We build a defeasible theory D 1 — (<d,Rr, >') as follows. If there exists a literal b l k 

530 such that b l k = ^a'j, then (r"j,rf k ) is in >'. It follows that, by construction, D 1 proves 

531 +da'j. This means that every rule r, 7 is applicable and it is not weaker than the corre- 

532 sponding rule r^, . Hence, we have — <3~c,-, for all i. Consequently, each rule r, for p is 

533 discarded and we conclude —dp. Accordingly, p is >-Rp -refutable. 



534 (2) Again, by Lemma [15] every theory based on Rp is decisive. Thus, p is >-Rp- 

535 refutable. Accordingly, there exists a theory D' = (0, Rf,>') such that D' h —dp. Given 

536 that Rr[p] ^ and Rp[^p] = by construction, every rule for p is discarded. Namely, 

537 we have —d^Cj, for all i. 

538 Each rule r^i is vacuously applicable. Hence, in order to have — d~c,-, there must 

539 exist a rule ry that is applicable. Therefore, for each i there is at least one j such that 

540 +<5^j- 

541 We build an interpretation / as follows]^] 

542 I(a)) = imD\-+da). 

543 Since for each 1 < i < n, we have /(a'-) = 1 for at least one j, then also / 1= Q for all /, 

544 and we conclude that / 1= F. 



In addition, Theorem 16 specifies that there are situations where it is not possible to 
revise a literal only using the superiority relation. For example, if we take a 3-SAT 
formula which is a tautology, the /"-transformation generates a theory that cannot be 
revised only using the superiority relation. Thus, we can formulate the following result. 



Corollary 17 There are theories and literals for which a revision modifying only the 
superiority relation is not possible. 



552 4.2 Revision in Legal Domain 

553 Similarly to what we did in Section [2] we now motivate the types of changes we are 

554 going to study by appealing again to the legal domain. When two lawyers dispute a 

555 case, there are four situations in which each of them can be if she revises the superiority 

556 relation employed by the other one. 

557 (a) The revision process supports the argument of reasonable doubt. Someone proves 

558 that the rules imply a given conclusion. If the preference is revised then we can de- 

559 rive that this is not the case, showing that the conclusion was not beyond reasonable 
sec doubt. 

561 (b) The revision process beats the argument of beyond reasonable doubt. Analogously 

562 to situation Q, someone proves that the rules do not imply a given conclusion. If 

563 the preference is revised, then we can derive that this is indeed the case. 

564 (c) The revision process supports the argument of proof of innocence/guilt. Someone 

565 proves that the rules imply a given conclusion. If the preference is revised, then we 
see can derive that the opposite holds. 

567 (d) The revision process cannot support a given thesis. 

see Revising a defeasible theory by changing only the priority among its rules means study- 

569 ing how an hypothetic revision operator works in the three cases reported below: 



4 We use the standard notation where 1(a) = 1 iff a is evaluated to True in /, and 1(a) = 
otherwise. 



570 (1) how to obtain —dp, starting from +dp; 

571 (2) how to obtain +d~p, starting from +dp; 

572 (3) how to obtain +dp, starting from —dp. 

573 We name these three revisions canonical. We provide an exhaustive analysis, based on 

574 the definitions above, in the next subsections. 

575 Situation ([a} corresponds to canonical case ([TJ. Situation |b]) corresponds to canon- 

576 ical case ([3]). Situation (jc| corresponds to canonical case (j2j). 

577 Situation (|d]i includes several contexts that are deemed as sub-cases of the previ- 

578 ous ones: in particular, it captures cases where indeed, the revision process based the 

579 superiority relation is impossible, namely: 

580 - in the first canonical case, when literal p is >-/?-tautological (by Definition [TT]); 

581 - in the second canonical case, when literal p is >-F-tautological, or a reasoning 

582 chain supporting the complementary does not exist (i.e., condition —E~p holds); 

583 - in the third canonical case, when literal p is d -unreachable (as stated in Propo- 

584 sition[8]l, or a reasoning chain supporting it does not exist (i.e., condition — Ep 

585 holds). 

586 Notice that literals provable with tag +<p are special cases of tautological literals (cf. 

587 DefinitionfTT). As such, this kind of literals leads the revision process to be unsuccessful 

588 for the first and the second canonical case. A possible legal scenario is when one of the 

589 parties argues in favour of a thesis in a defeasible way and the counter-part cannot 

590 discredit it, or cannot exhibit a proof for the opposite, independently of the changes in 

591 the superiority relation. The next proposition formally captures the above intuitions. 

592 Proposition 18 Given a consistent defeasible theory D = (F,R, >), if D h +(pp for a 

593 literal p, then there does not exist a theory D' = (F, /? , >' ) such that (1) D' h +d~p, or 

594 (2)D'\--dp. 

595 Proof. (1) Given any theory, to obtain a defeasible proof of a literal q, there must exist 

596 at least one reasoning chain supporting q, i.e., +Eq must hold. This is in contradiction 

597 with Proposition[3]which states that if +(p~q holds, also — Eq does. 

598 (2) By definition of +(pp, there exists a reasoning chain that defeasibly proves p 

599 made of elements such that there does not exist any rule for the opposite conclusion. 

600 Thus, no attack to this chain is possible, and condition (2.3.1) of +d always holds for 

601 each element of this chain (we recall that —El implies — dl for any literal /). 

602 In the rest of the section we are going to describe three types of revision of prefer- 

603 ences. For each case we identify the conditions under which such revisions are possible. 

604 Therefore, all revision cases studied below will not consider tautological literals as well 

605 as d -unreachable literals, assuming that the underlying theories are consistent. 

606 Given a defeasible theory D a literal p can be proved (i.e., +dp) or refuted (i.e., 

607 —dp). The three canonical cases cover the situations where: we pass from a theory 
60s proving p to a theory refuting p (without necessarily proving the opposite, we 
609 pass from a theory refuting p to a theory proving p; and from a theory proving p to a 
eio theory proving its opposite (^p), and then consequently refuting p. Notice that these 



611 three cases are the only ones meaningful involving provable and refutable literals. In 

612 Section [5] we are going to argue that our canonical cases can be understood as expan- 

613 sion, revision and contraction of the AGM belief revision framework. Combinatorially, 

614 one could consider another case, where p is refuted and we want to obtain a theory 

615 where we refute ~p. However, the meaning of this operation is not clear to us, and it is 

616 partially subsumed by our third canonical case (given that +dp implies — <?~p). 

617 We are now ready to go onto the systematic analysis of the combinations arising 

618 from the above defined model. We list the cases by tagging each macroscopic case by 

619 the name Canonical case and the combinations depending upon the analytical schema 

620 introduced above by the name Instance. The instances show the combination of proof 

621 tags where a canonical revision is possible, as well as how to operate on the theory to 

622 perform the revision. Where necessary, a general reasoning chain supporting a literal p 

623 will be denoted as P p . 

624 4.3 First canonical case: from +dp to —dp 

625 For the sake of clarity, Figure [2] gives a tree-based graphical representation of all anal- 

626 ysed instances: for example, the leftmost leaf (labeled as +(J^ p) represents the instance 

627 where conditions are +a^p, +(0^p, —(pp and +£~p. The scheme will be reprised 

628 also in the two remaining canonical cases, with the appropriate graphical modifications 

629 for the particular case. 



From +dp to — dp 
(-(ppA+E~ p ) 




Fig.2: From +dp to —dp: revision cases. 



630 Instance —E^p A +dp: this case is not reported in Figure [2] but nonetheless it rep- 

631 resents a case worth considering. This means there is no supporting chains for ~p, so 

632 we cannot operate on them. Given — (pp, there exists at least one of its premises that 

633 could be defeated by a rule leading to the opposite conclusion. Thus, in order to obtain 

634 —dp, we have to revise the theory allowing at least one of such rules to be able to fire 

635 (to defeat, or at least to have the same power of a rule which actually proves one of the 

636 antecedents in the chain supporting p). 

637 Instance +G)~p A +G^p: as stated in Proposition]?] this branch represents an impos- 

638 sible case for any consistent defeasible theory. 

639 Instance +(0^p A —<J~p: by the straightforward implication of Proposition [4] the 

640 chain supporting ~p fails on the last proof step, defeated by priorities for rules which 

641 defeasibly prove p. Thus, we have only to erase these priorities. 



642 Instance —6)^pA +a~p: since a chain P^ p exists, and is never defeated (condition 

643 —co^p only illustrates that such a chain fails before the last proof step), a revision 

644 process does not have to operate on a chain supporting p. We have to strengthen P^„ by 

645 changing many priorities in order to let a rule in P„ p obtain at least the same strength 

646 of such a rule in P p . In this process, we do not remove any priority among elements in 

647 P p , but only add priorities to let a rule in P^ p win. 

648 Instance — co^p A —o^p: the reasoning chain P^ p supporting ~p is defeated, but 

649 not necessarily by a chain P p proving p. The case is analogous to the aforementioned 

650 instance, but (1) we probably have to act not only on P~ p , but also on P p , and (2) not 

651 only introduce priorities, but erase or invert them. This case represents the most generic 

652 situation, where less information is given: a revision is possible, but we do not know a 

653 priori where to change the theory. 



6b 3 



!5b9 
660 



654 4.4 Second canonical case: from +dp to +d~p 

ess By following the cases depicted in Figure |2j we explain how a revision operator should 

656 work by changing the root label to "+d p to +<9~p" and starting from the same premises 

657 (—(pp A +E^p). Once more, our revision tree does not take into account tags ±<p for 
the same reasons explained at the beginning of Section|4] 

Instance +(0^p A +<J^p: as stated in Proposition [4] this branch represents an impos- 
sible case for any consistent defeasible theory. 

Instance +ffl~/)A —O^p: Proposition[4]states that the chain supporting ^p is defeated 
on the last proof step. This, combined with —o^p, implies that the last step is defeated 
by a priority for the rule which defeasibly proves p. In fact, there may exist more than 
one defeated chain for ~p on the last step, as well as more than one chain which proves 
p. We propose two different approaches. We name P the set of chains defeasibly proving 
P> Pis P the set of chains that defeasibly prove p for which there is a priority that 
applies at the last proof step (against a chain that proves and N the set of chains 
for which the premises hold: 

1 . We choose a chain in N. We invert the priority for every chain in P/ s that wins at the 
last proof step. We introduce a new priority for making it win against any remaining 
chain in P. 

2. In this approach we have two neatly distinguished cases: 

(a) \Pi s \ > \N\: for every chain in N we invert the priorities on the last proof step. 
For every remaining chain in P, we add a priority between the defeasible rule 
used in the last proof step of a chain in N and the rule used in the last proof 
step of a chain in P (possibly different for each chain in AO such that the chain 
in P is defeated. 

(b) \N\ > \Pi s \: we choose a number \Pj s \ of chains in N and invert the priority on 
the step where they are defeated. If at the end of this step there are still chains 
in P that defeasibly prove p, we go on with the method used for the case 2(a), 
focusing on the subset of chains in N modified during the first step. 



682 These two approaches rely on different underlying ideas. In the first case we want a 

ess unique winning chain. This makes the revision procedure faster than the second method, 

684 since we do not have to choose a different chain to manipulate every time. Moreover, 

ess the number of changes made with the first approach is equal to that of the second one 

ese in the worst case scenario (in general, it revises the theory with the minimum number 

687 of changes). 

ess The strength of the second method relies on the concept of team defeater. we do 

689 not give power to a single element, but to a team of rules. In the first method the entire 

690 revision process must be repeated once the winning chain is defeated, while in the 

691 second method if one of the winning chains is defeated, we have only to apply the 

692 revision process on it, and not on all the other winning chains. 

693 Let us consider the following example: 

=>n P =^2 P 

V V 

694 If the chain for ->p with rule r 4 is chosen as the winning chain, the first approach 

695 would give {r\ > rj, r 4 > r\ , r 4 > r-i\ as an output, erasing one priority and introducing 

696 two, while the second approach would generate the following priority set: {Y3 > r\ , r 4 > 

697 r{\, erasing two priorities, and introducing two. If a new rule r,- defeats r 4 , it is easy to 

698 see that in the first case we have to entirely revise the theory (for example, let r3 win 

699 against r\ and ri), while in the second case we have only to introduce rj, > r-i. 

700 Instance — (O^p A +G^p: there exists an undefeated chain supporting <~/j. To revise 

701 the theory, we have to choose one of them and, starting from <~p, go back in the chain 

702 to the ambiguity point (where P(i) = +d piAP(i+l) = —d pt + 1 holds), and strengthen 

703 the chain by adding a priority where a rule leading to an antecedent in the chain for ~/> 

704 and a rule for the opposite have the same strength. 

705 Instance — co^p A —<J~p: every chain supporting is defeated at least one time. 

706 A plausible solution could be to go back in the chain searching for the point where 

707 P(i) — +api and P(i+ 1) = —api+\. But this is not enough to guarantee the chain to 

708 win. Let us consider the following example. 

709 Example 3. Let D be a theory having the following rules: 

+d/-d +0/-O 

=> n a ^> r2 b => r3 c ^> r4 p 
A 

^>r s ^a => r6 

710 It is easy to see that the sole condition of winning over is not sufficient: we have 

711 also to introduce a priority between r\ and r^. Thus, we have to act exactly as in the 

712 aforementioned case, with the solely difference that every time a rule in the chain sup- 

713 porting <~/? is defeated, the priority rule has to be inverted. 



714 4.5 Third canonical case: from —dp to +dp 

715 For a proper analysis of this case, condition —d~p must hold since otherwise the case 

716 is analogous of the previous revision from +dq to +d^q. Also, we do not take into 

717 consideration the case where —Ep holds: if there are no chains leading to p, then no 

718 revision to obtain +dp is possible. The cases studied in this subsection are reported in 

719 Figure [3] 



From —dp to +dp 

(-d~pA+Lp) 



-COpA+Op 



-cop 
(— co~p) 



+ <jp —GP 

Fig. 3: From —dp to +dp: revision cases. 



720 Notice that +cop and — op cannot hold at the same time: if all the premises for p 

721 are proved, then the chain fails on the last step, i.e., it has to be defeated by a firing rule 

722 for ~p. This would defeasibly prove ~p, but this cannot happen since we have stated 

723 that —d^p holds. Furthermore, —cop implies that — 0)~p holds as well, since if it is not 

724 the case, we would have either +COp, or +d~p, which are both against the hypothesis. 

725 Instance +COpA +ap: we choose one of the chains where condition +cop A +Op holds, 

726 and introduce as many priorities as the number of chains where +co^p holds. 

727 Instance — cop A +cjp: this case is analogous to instance —co^p A +<J^p of canonical 

728 case from +dp to +d~p, 

729 Instance —cop A —Op: this case is analogous to instance —co^p A —a^p of canonical 

730 case from +dp to +<3~f>. 

731 

732 We remark that conditions ±<7~f> are not useful for the revision process, since they do 

733 not give information whether the changes will affect chains for ~p, or not. Example |4] 

734 shows that, even if +<7^p holds, two distinct revisions exist: the first involves the chain 

735 for ->p (introducing r\ > r^), the second does not (introducing r$ > rg). 

736 Example 4. Let D be a theory having the following rules: 

=^ n a ^ n p 

^>r 3 ^p 

^r 5 b =*V 6 P 
^r 6 ^b 

737 An analogous situation is proposed for —o~p in Example [5] 



738 Example 5. Let D be a theory having the following rules: 

=>n a => n p 

A 

739 In here, two revisions exist: one introducing r\ > r$, and the other one which introduces 

740 rj > rg. 

741 Notice that in all the canonical cases, the revision mechanism guarantees that no cycle 

742 can be introduced. We can formulate this result, which is a straightforward consequence 

743 of the case analysis presented here. 

744 Theorem 19 Revising a superiority relation generates a superiority relation. 



745 5 AGM postulates analysis 

746 The aim of this section is to study the canonical cases described in Section |4] from the 

747 point of view of the AGM approach. In particular, we try to relate the canonical cases 

748 with the types of theory change analysed by Alchourron, Gardenfors and Makinson in 

749 their seminal work ||3) as far as possible. Afterwards, we focus on understanding the 

750 meaning of the various AGM postulates in terms of the changes we proposed. This 

751 allows us then to identify which of the AGM postulates are satisfied by our canonical 

752 cases. 

753 This research issue is motivated, as introduced in Section [T] by the fact that the 

754 AGM postulates analysis in non-monotonic formalisms is still controversial, and thus 

755 open to discussion. 

756 We recall that Delgrande proposed an approach to belief revision of logic programs 

757 under answer set semantics that is fully compliant with the base AGM postulates for 

758 revision 0. He also claims in a later work |6] p. 568] that the third and fourth postulates 

759 for belief revision are not appropriate for belief revision of non-monotonic theories, and 

760 thus are ignored in his work. However, we are going to argue that these two postulates 

761 can be adopted in our approach, which suggests that the question whether the AGM 

762 postulates are suitable for non-monotonic reasoning is still open. 

763 In the remainder we assume that the reader is familiar with the terminology used in 

764 the AGM framework, in particular with the notions of belief, belief set, and f/zeor^ 

765 To adjust the AGM framework in the perspective of preference revision, we first 

766 rephrase the concept of extension into that of belief set corresponding to a defeasible 

767 theory. 



5 Notice that in our framework the hypothesis of completeness of a theory does not hold in 
general, as it could be the case that in a defeasible theory neither +dp, nor +i?~p is derivable. 



768 Definition 20 Let D — (F,R,>) be a defeasible theory. Then 



BS(D) = BS +d (D) U BS~ d (D) 

769 is the belief set ofD, where 

BS +d (D) = {p\ p is a literal appearing in D and Dh +dp} , 
BS~ d (D) = {p | p is a literal appearing in D and D\~ —dp}. 

770 We also state that when a literal p is believed, p 6 K in AGM notation, then p £ 

771 BS +d (D). Conversely, if a literal is not believed, i.e., p £ K, then p £ BS~ d {Df\ In- 

772 tuitively, the idea is that if we prove +dp then we believe in p, and if we prove —dp 

773 then we do not believe in p. 



In the remainder of the section, we relate the AGM operators of contraction, expansion, 
and revision, and then reframe the corresponding postulates of AGM in the terminology 
of defeasible theories (in Subsections |5.1f|5^2]i. 



Belief contraction is the process of rationally removing from a belief set K a certain 
belief y/ previously in the set. From the point of view of Defeasible Logic, by Definition 



20 



a defeasible theory D — (F,R, >) where D h +dp (i.e., p £ BS +d (D)) is modified 
such that —dp holds in the contracted theory (denoted by D~) after the process (i.e., 
p g BS~ d (D~)). For the above reasoning, it seems reasonable to argue that the process 
of belief contraction as formalised in AGM approach corresponds to our first canonical 
case, i.e., from +dp to — dp. If we consider a set of literals C = {pi,. ■ ■ ,p n }, we define 
the contracted theory as the theory where for each pt £ C, pt £ BS~ d (D^). 

Belief revision is the process of rationally deleting a certain belief yf from a belief 
set K and adding its opposite. From the point of view of Defeasible Logic, by Definition 
20j a defeasible theory D = (F,R, >) where D h +d~p (i.e., ~p £ BS +d (D) and p £ 
BS~ d (D)) is modified such that +dp holds in the revised theory (denoted by D* p ) after 
the process (i.e., p £ BS +d (D*)). Remember that in Defeasible Logic ~p now belongs 
to BS~ d (D* ). For the above reasoning, it seems reasonable to argue that the process 
of belief revision as formalised in AGM approach corresponds to our second canonical 
case, i.e., from +d~p to +dp. 

Belief expansion is the process of adding a certain belief yf to a belief set K. It is 
possible to consider two interpretations of the expansion process: the first where we 
simply force the belief in, the second where a belief is added if the opposite is not 
believed. Our third canonical case, i.e., from — dp to +dp, follows the second strategy. 



797 Therefore, from the point of view of Defeasible Logic, by Definition 20 this process 

798 describes the case of an initial defeasible theory D = (F,R,>) where D h —dp and 

799 D h —d^p (i.e., p,^p £ BS~ d (D)) hold being modified such that +dp holds in the 
soo expanded theory (denoted by Z)+) after the process (i.e., p £ BS +d (D+)). Remember 



6 Notice that it is possible that a literal p and its complement do not belong to BS(D). For 
example, consider the theory consisting only of p => p and -ip => -^p. In this theory none of 
±<9p and ±d^p is provable. 



801 that in Defeasible Logic still belongs to BS (Z)+). If we consider a set of literals 

802 C = {pi , . . . ,p n }, we define the expanded theory as the theory where for each pi 6 

803 C, P ieBS +d (D+). 

804 5.1 Preference contraction 

805 Throughout this subsection, we assume that D h +d p for a literal p in D. 

The first postulate in AGM belief contraction states that when a belief set is contracted 
by a sentence p, the outcome should be logically closed. In Defeasible Logic, we dis- 
tinguish between a theory (i.e., a set of rules), and its extension (i.e., its set of conclu- 
sions). In general, given an extension in Defeasible Logic, there are multiple (possibly 
not equivalent) theories that generate the extension. This means that in AGM there is no 
difference to contract a theory or its base, while it is not the case in Defeasible Logic. 

(K— 1) is a theory. 

806 As preference contraction acts only on the superiority relation, to ensure that a con- 

807 traction operation satisfies the postulate, we only have to check if the operation itself 
80s does not create a cycle in the superiority relation. This is guaranteed by the following 
809 proposition. 

sio Proposition 21 Given a defeasible theory D — (F,R, >), if D' = (F,R, >') is obtained 

en from D by erasing preference tuples from >, then >' is acyclic. 

8i2 Proof. By contradiction, let us suppose that there is a cycle in >'. Since, by hypothesis, 

en >' is obtained from > by simply removing preference tuples, then each element of >' 

8i4 is an element of > and the cycle in >' is also in >, against the hypothesis. 

The idea of the second AGM postulate for belief contraction is that a contraction re- 
moves beliefs, thus a contraction operation always produces a belief set smaller than 
the original. AGM focuses only on "positive" beliefs. However, in our framework we 
have two possible types of defeasible conclusions (as it turns out also by Definition|20]), 
thus we have to check the relationships between the elements of the defeasible belief 
sets before and after the operation. In particular, since we remove a belief, then the set of 
formulae believed should be smaller after the contraction; this also means that the set of 
formulae we do not believe is increased by the formula we contract. As a consequence, 
the second postulate must be rewritten taking into account the two parts. 

(K-2) BS +d {D p ) <ZBS +d (D) aadBS~ d (Dp) DBS~ d {D). 

sis This postulate cannot be adopted in our framework because it contradicts the sceptical 

816 non-monotonic nature of Defeasible Logic. To see this, suppose that we know a and we 

817 have the rules =>• p and a=>—<p. Then a is sceptically provable, and p is not. But if we 
sis decide to contract a, then p becomes defeasibly provable, thus we have p £ BS~ d (D) but 



819 p G BS +d (D p ) 7 Notice that this behaviour is not confined to the specifics of Defeasible 

820 Logic, but holds in any sceptical non-monotonic formalism. 



The third postulate of AGM considers the case when a belief \j/ is not in the initial belief 
set. As we have already discussed, AGM focuses on a classical notion of consequence 
relation, thus if y is not a consequence of the theory, then there is no reason to change 
anything at all. In Defeasible Logic, this corresponds to not being able to prove p. 
Accordingly, we can state that p G BS~ d (D). 

(K-3) If p G BS~ d (D) then BS(D p ) = BS(D). 

821 Since we want to obtain a theory where — dp holds and by hypothesis p G BS~ d (D), 

822 then the postulate trivially holds. 



The fourth AGM postulate states that the only literals that are immutable in the contrac- 
tion process are tautologies. Defeasible Logic does not have logical connectives, thus 
it is not possible to have tautologies in the classical sense. Nevertheless, the concept 
of tautology is that of a statement that cannot ever be refuted, i.e., it is true in every 
interpretation. In classical logic, an interpretation is an assignment of truth values to the 
propositional atoms, while in Defeasible Logic corresponds to consider a particular set 
of propositional atoms as factual knowledge. In the context of this paper, where we as- 
sume that the set of facts cannot be changed, the closest thing to an interpretation is an 
assignment of the superiority relation. We give the formulation of the success postulate 
for contraction using the contrapositive. 

(K-4) If p € BS(D~ ) then D h +Ap. 

The concept of strict derivation embodied by +A cannot fully capture the notion of tau- 
tology as a non-refutable statement, since the proof tag +<p indeed denotes the presence 
of a supporting chain made of elements for which there are no rules for the opposite, 
and so de facto a non-refutable argument obtained from defeasible rules. 

Thus, it seems reasonable to reformulate the success postulate for contraction as 
follows. 

(K-4 1 ) If p G BS(D p ) then D h +q>p. 

Even this version of the postulate does not hold in Defeasible Logic. Indeed, there exist 
situations where there is a proof for p and it is not possible to change the theory in order 
to make p no longer provable, even if there are opposite literals of some elements for 
every chain supporting p. A simple situation is to take a tautologous 3-SAT formula 



and to generate its F -transformation (see Definition 12 1. There are literals in the theory 



obtained that cannot be contracted. However, there are more cases. 



7 In general, making a literal p no longer defeasibly provable does not imply that — dp holds 
after the revision process. For example, consider the theory =? r p and —>p => s ->p. The only 
way to prevent +dp is to impose s > r, but in the resulting theory none of +dp and —dp holds 
(same for -<p). Notice that in this case the conditions for our canonical cases to succeed do not 
hold. 



833 Example 6. Let D be a defeasible theory with the following set of rules: 



=>r 3 a =^ r4 p 

834 To contract p, we must block both the chains proving p. But, in order to do so, we should 

835 have that D h +dl as well as D h +d—il. This is not possible since D is consistent. 

836 Unfortunately, the rule pattern shown in Example |6] is not a sufficient condition 

837 to reframe the postulate (K— 4'). Indeed, as Example p] shows, it is possible to find 

838 counter-examples where p can be contracted, as well as counter-examples to counter- 

839 examples (we refer to Example [8]) where, by extending the theory of Example [7] with 

840 rules {rig, ...,r2s}, the contraction of p becomes, again, not possible. 

841 Example 7. Let D be a defeasible theory with the following set of rules: 



852 
853 









a = 


>r 2 


P 








= 




P 








c = 


*r 6 


P 




I -- 


*t 


^a 






'«> 


~nl = 


^HO 


-to 






'"1 1 


m = 


>r [2 


-to 






r 13 


-^m = 


=>14 


-iC 






r 15 


n = 




->c 






r n 


-^n = 


^>i8 


-ia. 







842 To contract p, we must block derivations of +da, +db and +dc. This can be ob- 

843 tained by adding the following tuples to the superiority relation: (7-7,7-9), {ru,r\3) and 

844 (r 15 ,ri 7 ). 



Example 8. 



> ri9 e ^r 2 o P 
>r 2l f ^r 22 P 



11 



-m ^ r24 ->/ 
-an => r2S -if. 

845 To contract p, we must now block derivations also of +de, and +df. Derivation of e 

846 can be blocked only if we prove the antecedent of rn, that is n (the derivation of c is 

847 blocked as well). This implies that the derivation of / is blocked only if +d—m holds 

848 (the only antecedent of rule ^5). We can now operate only on the provability of either 

849 /, or -1/. In both cases, one between a or b cannot be refuted. 



850 In Subsection 4.1 we have shown that, in general, revising a defeasible theory using 

851 



only the superiority relation is an NP-complete problem. This suggests that there might 
not be a simple condition, based on proof tags, that can be computed in polynomial time 
and also guarantees a successful contraction. 



The fifth AGM postulate states that contracting, and then expanding by the same belief 
y/ will give back at least the initial theory. 

(K-5) If p e BS +d (D) then BS(D) C BS{{D p )+). 

854 This postulate cannot be adopted since, once the contracted theory has been obtained, 

855 the backward step does not uniquely correspond to expanding the obtained theory by 
sse the same literal, as the following example shows. 

ss/ Example 9. Let D be a defeasible theory having the following rules: 

=>n a ^> n P 
V 

=> r3 ~^a 

=>r 4 b =>r 5 P 

sss If we contract D by p, in the contracted theory the preference r\ > r^ is no longer 
ess present. If we now expand D p , one solution is the initial theory, but also the theory 

860 containing the preference r^ > r(, is another valid solution. 

861 Nevertheless, if all operations in the contraction process can be traced, then we can 

862 easily backtrack and obtain the initial theory, satisfying the postulate. 



The sixth AGM postulate, also known as the postulate of the irrelevancy of syntax, 
states that if two beliefs y/ and % are logically equivalent, then contracting by y/ and 
contracting by % produce the same result. 

(K-6) If h p = q then BS(D~ ) = BS(D~). 

ses In the framework of Defeasible Logic, the language is restricted to literals, thus two 
864 elements p and q are equivalent only if they represent the same literal. For this reason, 
ses the sixth postulate straightforwardly follows. 



The seventh and the eighth postulate are best understood if seen in combination. They 
essentially relate two individual contractions with respect to a pair of sentences \j/ and 
X, with the contraction of their conjunction y/ A %. As already stated, in Defeasible 
Logic there are no logical connectives, and a conjunction of literals is equivalent to the 
set of the same literals; the same reasoning used to introduce postulate (K— 2) applies 
here. Thus, the two postulates can be rewritten as 

{K-l) BS +d {D- ) n BS +d (£>- ) C BS +d (D~ q ) and 
BS-* (D~ )HBS- d (D- )DBS- d (D~ q ) . 

(K-S) Ifpe BS- d {D p q ) then BS +d {D p q ) C BS +S '(£>") and 
BS- d (D-)CBS- d (D- q ). 

see Postulates (K—l) and (K— 8) do not hold for the same reason formulated for postulate 
867 (^—2). The following example shows the truth of the statement for both of them. 



868 Example 10. Let D be a defeasible theory having the following rules: 



-rr 3 

A 



V 

^>r 3 -.C,-iJ=> r4 p 
=> r5 -nj V 
A =*>r 6 ~>P 

=^ r? b d 
V 

sea In this theory, we have BS +d (D) = {a,b,c,d^p}, and BS~ d (D) = {^a, -ib,->c,-id,p}. 

870 Let us contract D by literal a and by literal (where the contractions are minimal with 

871 respect to the changes in the superiority relation) obtaining: 

BS +d (D-) = {b,^c,d^p} 
BS +d (D h ) = {a,c^d^p} 
BS- d (D-) = {a,^a,^b,c^d,p} 
BS~ d (D h ) = {^a,b,^b,^c,d,p}. 

872 The respectively intersections are: 

BS +d (D-)nBS +d (D-) = {-,p} 
BS- d (D-)nBS- d (D h ) = {^a^b,p}. 

873 We can now contract a and b simultaneously, and obtain 

BS +d (D- b ) = {^c,^d,p} 
\. b 

874 proving our claim. 



BS d ( D ab ) = { a >~' a > b >~' b > C > d >~'P} 



Throughout postulates (K—l) to (K—S) we took care of the transition effects of 
the contraction process, due to the specific nature of positive and negative beliefs in 
Defeasible Logic. However, for each postulate this specificity has no effect. In fact, 
what can be claimed for contractions in BS +d extends to BS~ d , and vice versa. 

For the sake of completeness, we apply the same care to expansion and revision 
cases further on. As it will be clear at the end of each analysis, analogous conclusions 
about the redundancy are derived. 



882 5.2 Preference revision 



ess Throughout this subsection, we assume that D h +d^p and D h +Ep for a literal p in 

884 D. 



The first AGM postulate for revision states that the revision process has to preserve the 
logical closure of the initial theory. 

(K*l) D* p is a theory. 

ess The reasoning is the same made for the first postulate for contraction and expansion, 
sse and it assures that also (K * 1 ) is satisfied in our framework. 

The second AGM postulate for revision captures the most general interpretation of the- 
ory change; the new information y/ is always included in the new belief set, even if 
\j/ is self-inconsistent, or contradicts some belief of the initial theory. Henceforth, the 
complete reliability of the new information is always assumed. 

(K*2) P eBS +3 {D* p ). 

887 As by definition of our second canonical case, literal p is forced to be defeasibly proved 
ess after the process, provided that preconditions +d^p and +Ep hold, the postulate is 
sse clearly satisfied. 

The third and the fourth postulates of AGM revision explain the relationship between 
the revision and the expansion processes. The quintessential meaning is that they are 
independent by operators implementing them. 

(K*3) BS +d (D* p )CBS +d (D+). 

(K*4) If ~p e BS~ d (£>) then BS +d (D+ ) C BS +d (£>* ) . 

890 Both the first two canonical cases, starting from an initial theory and considering a 

891 literal p, operate to obtain a final theory where +d p holds. What we have to care about, 

892 however, are the preconditions for which these two canonical cases apply. The third 

893 postulate essentially states that every belief which can be derived revising a theory 

894 by a belief y/ can be also obtained expanding the same initial theory with respect to 

895 the same belief. This statement is perfectly allowed in our framework; the case where 

896 both revision and expansion can apply is when +d~p (and hence — dp) holds in the 

897 initial theory; in this situation, the two processes behave in the same manner, i.e., they 

898 calculates the same extensions. However, if we regard at proper expansion, i.e., when 

899 condition —d~p holds, then it is easy to see that the preconditions for expansion and 

900 revision are mutually exclusive and can not be applied at the same time. 

The fifth AGM postulate states that the result of a revision by a belief y/ is the absurd 
belief set iff the new information is in itself inconsistent. 

(K*5) If p is consistent then BS +d (D* p ) is also consistent. 

901 Since by definition a literal p is always consistent, and the extension of a consistent 

902 theory is also consistent, the postulate is trivially satisfied. 



The sixth AGM postulate for revision follows the same idea of (K— 6): the syntax of 
the new information has no effect on the revision process, all that matters is its content. 
Again, it has a natural counterpart in Defeasible Logic. 

(K * 6) If h p = q then BS +d (D* p ) = BS +d (D* ) . 

903 The reasoning is the same exploited in the counterpart postulate for contraction, and the 

904 postulate is straightforward. 

The seventh and the eight postulate of AGM revision cope with the revision process 
with respect to conjunctions of literals. In the classical AGM framework, the princi- 
ple of minimal change takes an important role in the formulation of these postulates. 
The revision with both \j/ and % should correspond to a revision of the theory with y/ 
followed by an expansion by %, provided that % does not contradict the beliefs in the 
theory revised by \\r. 

(AT* 7) BS +d (D^ q ) CBS + \(D*X) and BST* {{D* p )+) C BS~ d (D* M ). 

(£*8) If ^qeBS- d (D* p ) then BS +d {{D* p )+) C BS +d {D* p q ) and 
BS- d (D; tq )CBS- d ((D;)+). 

905 Again, since the sceptical nature of Defeasible Logic, these postulates cannot be satis- 

906 fied. The following example gives a specific case that falsifies them. 

907 Example 11. Let D be a defeasible theory having the following rules: 
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->b 
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^q 
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=>ru 
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90s Given theory D, we have BS +d (D) = {->p}, while all other literals are in BS~ d (D) . Re- 

909 vising D for p and q, one possible theory is D* p q , obtained operating through the prov- 

910 ability of literal b and adding the following superiorities: > rg, rj > m, and r% > rg. 

on The resulting BS +d (D* Ptq ), BS~ d {D* ) are respectively {b, c,p, q}, and {a, ->a, ^b,^p, ~^q}. 

912 Now, let us consider the revision just by p. A possible solution is D* p such that 

913 BS +d (D* p ) = {a,c,p}, and BS~ d (D*) = {^a,b,^b, ~^p,q,^q}. In this case the revision 
9« process acts on the provability of literal a, adding ri > r\, and rj, > r 4 . 

915 If we expand D* p by q, one possible resulting theory is (D* p ) q (the expansion pro- 

916 cess now operates on the provability of literal c adding ni > rg) where ((£)*)+) = 

917 {a,c,p,q}, and BS~ d ((D* p )+) = {^a, b, ^b,^p, ^q}. The intersection of D* p q and (D*)+ 

918 is not empty, but neither theory is contained in the other. 



919 5.3 Preference expansion 

920 Throughout this subsection, we assume that for a literal p in D both Dh —dp and 

921 Dh —d~p. Moreover, +Ep holds. 

The first AGM postulate for expansion states that if a theory is expanded with a belief 
y/, then the resulting theory is the logical closure of the initial theory. 

(K+ 1) D+ is a theory. 

922 The same idea for postulate (K— 1) can be exploited, thus the postulate is clearly satis- 

923 fied. 

The second AGM postulate for expansion assures that a belief \j/ for which the expan- 
sion is performed always belongs to the belief set of the resulting theory. 

(K + 2) P eBS +d (D+). 

924 By the hypotheses given at the beginning of this subsection, the postulate trivially holds 

925 since the expansion process forces literal p to be defeasibly proved. 

The joint formulation of the third and the fourth AGM postulates for expansion states 
that if a belief is already present in the initial belief set, then an expansion process lets 
the theory unchanged. 

(K + 3) BS +d (T) <Z BS +d (T+) and BS~ d {T+) C BS- d {T). 

(K + 4) Ifpe BS +d (T) then BS +d (T+) C BS +d {T) and BS~ d (T) C BS- d (T+). 

926 Since we aim at obtaining a theory where +d p holds, and by hypothesis p e BS +d (T), 

927 the postulates seen together trivially hold given that, by definition, its premise does not 

928 hold. 

The fifth AGM postulate states that if a belief set is contained in another one, then the 
expansion of both sets wrt the same belief preserves the relation of inclusion. 

(K + 5) If BS +d (D) C BS +d (£>' ) then BS +d (D+ ) C BS +d (£>'+ ) . 

929 Also in this case, because of the sceptical non-monotonic nature of Defeasible Logic, 

930 this postulate can not be satisfied, as already pointed out in the explanation of Postulate 

931 (K-2). 

Non-monotonic formalisms derive conclusions that are tagged. The specific nature of 
this tagging is that it makes the notion of minimality for a set of conclusions useless. We 
can consider minimality only for one given tag, and not for all tags (this is particularly 
obvious for formalisms where tags of formulae are interdependently defined). Thus, the 



idea of "smallest resulting set" is meaningless in non-monotonic systems. The sixth 
AGM postulate assures the minimality of the expanded belief set. 

(K + 6) Given a theory D and a belief p, 

BS(D+) is the smallest belief set satisfying (K+l) — (K + 5). 

932 In the perspective of non-monotonic reasoning, the operation of expanding a defeasible 

933 theory to prove a literal p (only changing the preference relation) necessarily falsifies 

934 some other literals, previously provable in the initial theory. 



935 5.4 Preference identities 

In AGM framework a process that defines revision in terms of expansion is available, 
suggested by Isaac Levi 1 19 1. The idea is that to revise a theory D by a belief yf we may 
firstly contract D by -i yf in order to remove any information that may contradict yf, and 
then expand the resulting theory with yf. This is know as the Levi identity, which can 
be rewritten using our terminology as: 

(LI) BS(D* p )=BS((D- p ) + p )- 

936 The following example shows that the Levi identity does not hold in our framework. 

937 Example 12. Let D be a defeasible theory having the following rules: 

=> n a ^ n p 



943 



947 



=>r A ~<P 

>r 1 ~>b 



938 If we revise D by p, a possible solution is D* p such that BS + (D* p ) = {a,p}, and 

939 BS~ d (D*) = {^a, b, ~^b,^p}. Now, contracting Dby can lead to DZ, p with BS +d (D~ p ) 

940 {b}, and BS~ d (D~ p ) = {a,^a,^b,p,^p}. If we expand D~ p by p, we obtain {D~)t 

941 with ((£>-,)+) = {b,p}, 3xv&BS- 3 ((D- p )+) = {a, -.a, ->b, ^p}. 

942 The Levi identity does not hold as our revision procedure concerns the reasons why 
one belief is obtained and not only whether we have one belief. Thus when there are 
multiple reasons to justify one belief, it is possible to contract the theory in multiple 
ways, and similarly to expand it in multiple ways, and the changes for the contractions 
are not necessarily the 'opposite' of those for contraction. 

As Levi Identity relates the revision process in terms of expansion, Harper pro- 
posed a method to obtain the contraction using revision |20|; the underlying idea is that 
a theory D contracted by a belief yf is equivalent to the theory containing only the in- 
formation that remain unchanged during the process of revising D by In our terms, 
the Harper Identity can be rewritten as 

(HI) BS(D p )=BS(D^ p )nBS(D). 



Harper Identity does not hold for the operations we defined in this paper. Example 13 



948 provides a counter-example to it. 



949 Example 13. Let D be a defeasible theory having the following rules: 



p => n q 

V 

V =>r 3 ^q 
A 

=^r 4 =^r 5 q 

950 The initial belief set is BS +r> (D) — {p,q} and BS~ d (D) — {->p, ->q}. If we contract 

951 D by p, we obtain a theory D~ such that BS +d {D~) is {^g} and BS~ d {D~) contains 

952 all the other literals. Instead, if we revise the initial theory with ->/? the theory D* 

953 where BS + ° '(£>*») = {^.p,"?} and BS~ d (D*) = {p, ~^q} is obtained. The intersections 

954 between the revised theory and the initial one are BS +d (D*_, p )nBS +d {D) = {q} and 

955 BS- d {D*_ ip )nBS- d (D) = {^q}. 

956 Again, the main reason for the failure of the Harper Identity resides in the non-monotonic 

957 nature of Defeasible Logic, where, in general it is not possible to control the conse- 

958 quences of a given formula. 

959 In this section we have provided an interpretation of the AGM postulates for expan- 

960 sion, contraction and revision in terms of our canonical cases and the operations that 

961 are possible when the changes operate only on the superiority relation. 

962 We believe that the contribution of this section is multi-fold. First of all, the defini- 

963 tion of our canonical cases offer a more precise formal understanding of the intuition of 

964 the various operations. Second, we reconstructed the postulates for the canonical cases^j 

965 and discuss how to adapt them. The last contribution of the analysis confirms the out- 

966 come of 12), showing that in general the postulates describing inclusion relationships 

967 between belief sets before and after a revision operation do not hold for Defeasible 

968 Logic, and it is unreasonable to expect that they hold for non-monotonic reasoning in 

969 general. 



970 6 Related Work 

971 As far as we are aware of, the work most closely related to ours is that of [21 1 where the 

972 authors study, given a theory, how to abduct preference relation to support the derivation 

973 of a specific conclusion. Therefore the problem they address is conceptually different 

974 from what we presented in this paper, given that we focus on modifying the superiority 

975 relation. 

976 Notice that in non-monotonic reasoning, a revision is not necessarily triggered by 

977 inconsistencies. Q investigates revision for Defeasible Logic and relationships with 

978 AGM postulates. While their ultimate aim is similar to that of the present paper - i.e., 

8 Notice that while the main analysis in this paper is specific to revision of the superiority relation 
of Defeasible Logic, the definition of the canonical cases does not depend on it, and it can be 
applied in a much broader context. For example the canonical case from +dp to +d^p can be 
understood as "how do we modify a theory such that before the revision a formula holds, and 
after the revision the opposite holds?"; similarly for the other canonical cases. 



979 transforming a theory to make a previously provable (resp. non provable) statement, 

980 non provable (resp. provable) - the approach is different, and more akin to standard 

981 belief revision. More precisely, revision is achieved by introducing new exceptional 

982 rules. Furthermore, they discuss how to adapt the AGM postulates for non-monotonic 

983 reasoning. 

984 Our work is motivated by legal reasoning, where preference revision is just one 

985 of the aspects of legal interpretation. [22 23 1 propose a Defeasible Logic framework 

986 to model extensive and restrictive legal interpretation. This is achieved by using revi- 

987 sion mechanisms on constitutive rules, where the mechanism is defined to change the 

988 strength of existing constitutive rules. Based on the specific type of norm to modify, 

989 they propose a revision (contraction) operator which modifies the theory by adding 

990 (removing) facts, strict rules, or defeaters, raising the question whether extensive and 

991 restrictive interpretation can be modelled as preference revision operators. An impor- 

992 tant aspect of legal interpretation is finding the legal rules to be applied in a case: in this 

993 work we assumed that the relevant rules have already been discovered, and in case of 

994 conflicts, preference revision can be used to solve them. 

995 Another work, related to revision of Defeasible Logic is that of [4 |, where the key 

996 idea is to model revision operators corresponding to typical changes in the legal do- 

997 main, specifically, abrogation and annulment. They show that, typically, belief revision 

998 methodologies are not suitable to changes in theories intended for legal reasoning. Sim- 

999 ilarly, they show that it is possible to revise theories fully satisfying the AGM postulates, 

1000 but then the outcome is totally meaningless from a legal point of view. 

1001 The connection between sceptical non-monotonic formalisms and argumentation is 

1002 well known in literature; in |9|, authors adapt Dung's argumentation framework B24I25I 

1003 to give an argumentation semantics for Defeasible Logic: first, they prove that Dung's 

1004 grounded semantics characterises the ambiguity propagating DL; then, they show that 

1005 the ambiguity blocking DL is described with an alternative notion of Dung's acceptabil- 

1006 ity. The main effort was to establish close connections between defeasible reasoning 

1007 and other formulations of non-monotonic reasoning. 

loos Non-monotonic revision through argumentation was also investigated in 1261271 us- 

1009 ing Defeasible Logic Programming (DeLP). They define an argument revision operator 

1010 that inserts a new argument into a defeasible logic program in such a way that this ar- 

1011 gument ends up undefeated after the revision, thus warranting its conclusion, where a 

1012 conclusion a is warranted if there exists a non-defeated argument supporting it. Despite 
ion the meaning given in this work, their concept of defeaters denotes stronger counter- 

1014 arguments to a given conclusion based on a set of preferences stating which argument 

1015 prevails against one other. 

1016 Their work suffers from a main drawback: imposing preferences among arguments 

1017 (i.e., whole reasoning chains in our framework), instead of single rules, can lead to a 
lois situation when an argument is warranted even if all its sub-arguments are defeated. 

1019 DeLP formalism is very similar to Defeasible Logic. Therefore, techniques pro- 

1020 posed in this work can be easily accommodated to join the framework presented in 

1021 1261271 . 

1022 Other works closely related to ours are [28 29 30 31 1. They propose extensions of 

1023 an argumentation framework, Defeasible Logic and Logic Programming, where the su- 



1024 periority relation is dynamically derived from arguments and rules in given theories. 

1025 While the details are different for the various approaches, the underlying idea is the 

1026 same. For example, in |29l , it is possible to have rules of the form r : a => (s > t) where 

1027 s and t are identifiers for rules. Accordingly, to assert that rule s is stronger than rule t 

1028 we have to be able to prove +da and that there are no applicable rules for -i(s > t). In 

1029 addition, the inference rules require that instances of the superiority relation are prov- 

1030 able (e.g., +d(s > f)) instead of being simply given (as facts) in >, i.e., (s,t) E>. The 

1031 main difference with these works is that we investigate general conditions under which 

1032 it is possible to modify the superiority relation in order to change the conclusions of a 

1033 theory, while they provide specific mechanisms to compute conclusions where the pref- 

1034 erence relations are inferred from the context. They do not study which are the possible 

1035 ways to revise a theory. For example, if a literal is > -tautological, no matter how we 

1036 derive instances of the preference relation, there is no way to prevent its derivation, or 

1037 to derive its negation. 

1038 In the scenario where the preferences over rules are computed dynamically, one 

1039 could argue that it might be possible to encode in the theory the possible ways in which 

1040 the superiority relation would behave. The problem with this approach is the combina- 

1041 torial explosion of the number of rules required, since one would have to consider rules 

1042 with the form a\, . . . ,a n =^ (r, > rj) for all possible combinations of literals a* in the 

1043 theory, and also for all possible combinations of instances of >. In both cases there is 

1044 an exponential number of combinations. Among the works mentioned above, l28l is 

1045 motivated, as us, by legal reasoning, and they use rules to encode the legal principles 

1046 we shortly discussed in the introduction. 

1047 7 Conclusions and further work 

1048 Over the years Defeasible Logic has proved to be simple but effective practical non- 
1049 monotonic formalism suitable for applications in many areas. Its sceptical nature allows 

1050 to have defeasible proofs both for a belief and its opposite, and still be consistent since, 

1051 at most, one of them can be finally proven. Since from its first formulation in (32), many 

1052 theoretical aspects of Defeasible Logic have been studied: from its proof theory lfT2l to 

1053 relationships to logic programming [33 1, from variants of the logic [ 16] to its semantics 

1054 [9] and computational properties [18|. Furthermore, several efficient implementations 

1055 have been developed B34I35I36II . Methods to revise, contract, or expand a defeasible 

1056 theory were first proposed in [2], where the authors studied how to revise the belief set 

1057 of a theory based on introduction of new rules. The resulting methodology was then 
loss compared to the AGM belief revision framework. 

1059 In this work we took a different approach: since, in many situations, a person cannot 

1060 change the rules governing a system (a theory) but only the way each rule interact with 

1061 the others, it seems straightforward to consider revision methodologies of Defeasible 

1062 Logic where derivation rules are considered as "static" or "untouchable", and the only 

1063 way to change a theory with respect to a statement is to modify the relative strength of a 

1064 rule with respect to another rule, i.e., to modify the superiority relation of the analysed 

1065 theory. 



1066 Therefore, we presented in Section[3]the formalism adopted: eight different types of 

1067 tagged literals were described to simplify the categorisation process and, consequently, 

1068 the revision calculus. In Section |4] we introduced three canonical cases of possible 
loes revisions and systematically analysed every canonical instance. In both sections, we 

1070 presented several theoretical results on conditions under which a revision process is 

1071 possible. 

1072 Upon these theoretical basis, in Section|5] we proposed a systematic comparison be- 

1073 tween our framework and the AGM postulates. In there, the three canonical cases were 

1074 compared to the AGM contraction, expansion, and revision: for each belief change op- 

1075 erator, all the AGM postulates were rewritten using our terminology, and their validity 

1076 was studied in our framework. 

1077 The work presented in this paper paves the way to several lines of further investiga- 
te tion to extend the proposed change methodologies. 

1079 The first extension we want to mention is that where we change the status of a sets 

1080 of literals instead of a single literal. Studying conditions (supporting chains, proof tags, 

1081 and so on) to understand when, and where, it is possible to change a theory by more 

1082 than a single literal is not a trivial issue. Consider the following theory 

1083 Example 14. D = 

^r 3 a b ^ rs p 

A 

=>r 6 -XI. 

1084 It is clear it is not possible to change the initial theory if we want to obtain both +d p 
loss and +dq. 

lose The second extension concerns how to limit the scope of the revision operators. 

1087 Revision of preferences should not involve minimal defeasible rules. This constraint 

loss captures the idea that a rule that wins against all other rules is a basic juridical prin- 

1089 ciple. A similar aspect is that under given circumstances the revision process should 

1090 not, for at least a subset of "protected" pairs, violate the original preferential order. For 

1091 instance, we should not revise those preferences that are unquestioned because derived 

1092 by commonly accepted principles or explicitly expressed by the legislator, as discussed 

1093 in the introduction. 

1094 As we have seen in Section|2] in the legal domain we can identify several sources for 

1095 the preference relation. Preference handling in Defeasible Logic can gain much from 

1096 typisation of preferences themselves. The notion of preference type and its algebraic 

1097 structure has been studied previously and can be applied directly here [37). Analo- 

1098 gously, one of the possible directions of generalisation for the notion of preference is 

1099 the notion of partial order, investigated at a combinatorial level by l38l and then studied 
noo from a computational viewpoint in 1 39 1 . 

noi The main aim of the paper was to identify conditions under which revision based on 

1102 changes of the superiority relation was possible. Accordingly, the next important aspect 

1103 of belief revision is to identify criteria of minimal change. It is possible to give alterna- 

1104 tive definitions of minimal revision. For example, one notion could be on the cardinality 

1105 of instances of the superiority relation, while another one is to consider minimality with 



1106 respect to the conclusions derived from a theory. A few research questions naturally fol- 

1107 low: 'Are there conditions on a theory to guarantee that a revision is minimal?', or 'Is it 
lios possible to compare different minimality criteria?' . 

nog We illustrate some of these issue with the help of the following example, 
mo Example 15. Let D be the following theory 

=>n a =>r 2 b => n p 

^>r A ^,. 5 ->b 

=>r 6 c => ri d =*> rg e => r9 p 
A 

=*-no ^ c 

1111 

>' = {(r 6 ,rio)} 

>" = {(n, r4 ),( r2 ,r 5 )}. 

1112 Superiority relation >' guarantees to change only one preference, but modify the exten- 

1113 sion of the former theory by five literals (c,^c,d,e, and p), while >", by adding two 
an preferences, changes only three literals (a,b and p). 

ins Finally, the present work provides a further indication that the AGM postulates are 
me not appropriate for belief revision of non-monotonic reasoning. Consequently, a natural 
my question is whether there is a set of rational postulates for this kind of logics. We are 
ins sceptical about this endeavor: there are many different and often incompatible facets 
nig of non-monotonic reasoning, and a set of postulates might satisfy some particular non- 
1120 monotonic features but not appropriate for others. For example, as we have seen in this 

1121 paper, if we ignore monotonic conclusions (conclusions tagged with ±A), there are 

1122 other cases where we cannot guarantee the success of the revision operation. On the 

1123 other hand, [2J argues that the success postulate for revision holds if we are allowed to 

1124 operate on rules instead of preferences. This example suggests that it might possible to 

1125 find a set of postulates, but this would specific to a logic and specific types of operations. 

1126 The quest for an alternative set of postulates for revision of non-monotonic theories is 

1127 left for future research. 
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